Skip to main content

What are Asia-Pacific frameworks (Singapore, Japan, India)?

Singapore's PDPA (Personal Data Protection Act) requires consent for collecting and using personal data for marketing. It maintains a Do Not Call (DNC) Registry that senders must check before messaging-violating DNC provisions results in significant penalties. The law applies to organizations in Singapore and those processing Singapore residents' data.

Japan's Act on Regulation of Transmission of Specified Electronic Mail requires opt-in consent for commercial messages to most recipients, with specific exceptions for existing business relationships. Japan's framework includes provisions for mobile messaging and has penalties for violations including fines and potential criminal liability.

India's DPDP Act (2023) creates consent-based requirements for personal data processing with notice provisions, purpose limitation, and data principal rights including access, correction, and erasure. The framework is still developing with implementing regulations. APAC frameworks trend toward consent requirements, though specifics vary. When uuncertain, treating APAC subscribers as requiring opt-in consent is the safer approach.